Memory Access Vulnerability in Microsoft Java Implementation in Internet Explorer

CVE-2002-1289

Summary

The Microsoft Java implementation in Internet Explorer features a vulnerability that permits remote attackers to read restricted process memory and potentially execute arbitrary code. The exploit occurs via the 'getNativeServices' function, which instantiates the 'com.ms.awt.peer.INativeServices' class. Notably, the methods within this class fail to validate memory addresses passed as parameters, leading to unauthorized memory access and resulting in a denial of service through application crashes.

References